Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
File: Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft (raw, json)
Hash identifier: YUMBru8/xAAGIYKYCgQ1l3NT6wZjto0sHjdSi6oFjNY=
Subject key identifier: 89:B5:78:D8:8A:49:28:85:C6:62:0F:B1:BE:B9:6D:7D:F8:5C:E6:74
Authority key identifier: 67:77:98:7B:4F:1C:17:D2:14:65:A3:4A:90:BD:02:B5:2E:A6:E0:27
Certificate issuer: /CN=6777987b4f1c17d21465a34a90bd02b52ea6e027
Certificate serial: 0194BBCE6CB072D5158CAF6E3AD3C4555E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
Manifest number: 0B33
Signing time: Fri 31 Jan 2025 10:00:55 +0000
Manifest this update: Fri 31 Jan 2025 10:00:55 +0000
Manifest next update: Sat 01 Feb 2025 10:00:55 +0000
Files and hashes: 1: Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl (hash: 72AQyFCcAS4rSNSRWSOK3PMvTUg+oubu0dysZZ7U49A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6c:b0:72:d5:15:8c:af:6e:3a:d3:c4:55:5e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6777987b4f1c17d21465a34a90bd02b52ea6e027
Validity
Not Before: Jan 31 10:00:55 2025 GMT
Not After : Feb 1 10:00:55 2025 GMT
Subject: CN=89b578d88a492885c6620fb1beb96d7df85ce674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:53:b2:6d:29:d9:48:c5:a9:c4:d9:3e:f5:fd:
d0:36:b5:0e:8c:82:bf:bd:06:be:d9:20:bc:9e:97:
45:4e:52:35:ef:bd:c9:85:68:4d:c8:b4:3e:96:7d:
db:fd:97:38:00:33:92:dc:b3:b1:4f:6b:f1:b4:1b:
e6:90:f8:96:08:bc:92:56:64:06:a7:23:ad:e6:a7:
a0:8f:2f:71:4a:77:67:ce:a3:a5:56:33:ea:ad:ef:
26:74:51:60:9e:52:9f:02:4c:ad:e1:e5:a2:06:e7:
fd:90:56:11:b7:52:7a:61:50:69:c9:57:f7:0a:02:
44:77:86:74:9d:d5:09:69:68:d4:5f:c2:7b:4b:66:
d4:b1:95:2f:6f:7d:f8:70:42:35:fe:af:12:dc:52:
1d:f4:bf:ef:8b:f4:f3:44:2b:f3:6e:9d:38:a3:78:
9b:54:01:16:8c:17:74:b1:ec:75:1e:f4:36:3b:39:
92:64:d0:9c:62:b7:e8:a8:e5:e1:70:86:6b:69:87:
94:35:68:e9:be:77:3b:d3:b1:5a:fd:77:21:e4:78:
57:e2:8e:17:cf:e5:e2:b1:d3:55:3f:97:1c:01:2b:
a5:22:e1:09:3f:2f:c1:29:36:a7:0c:ce:77:f7:03:
95:de:6f:1d:3b:db:71:34:c2:6b:25:c5:06:48:f8:
f3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B5:78:D8:8A:49:28:85:C6:62:0F:B1:BE:B9:6D:7D:F8:5C:E6:74
X509v3 Authority Key Identifier:
keyid:67:77:98:7B:4F:1C:17:D2:14:65:A3:4A:90:BD:02:B5:2E:A6:E0:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:05:c7:de:51:ae:10:b8:0b:9a:89:ad:43:a9:d6:7d:d8:a9:
bd:9c:89:43:cb:a8:96:2a:07:0f:1e:b0:01:67:df:4d:17:c4:
34:96:56:0e:13:77:53:6e:89:a6:5b:d1:21:ca:18:81:38:ad:
d5:9d:f6:7a:e6:3d:3c:d9:4c:df:bb:fb:22:90:82:69:57:bb:
b7:5a:43:de:b4:88:ee:d8:2a:d3:d4:6f:70:c0:59:15:1e:c7:
f7:33:c1:fa:94:cb:4c:cc:1f:ed:12:f8:87:06:40:73:99:57:
6f:26:ec:00:54:34:ff:63:4e:c0:1a:5e:d0:88:ef:69:a2:53:
c5:27:80:5f:b4:c0:2f:af:08:d6:4e:80:1a:9b:a9:cc:da:50:
c1:5e:1d:f1:cd:e2:e3:18:43:68:14:9e:c3:b1:dc:8c:6f:04:
43:89:a4:46:63:53:6f:dc:2c:1a:00:a9:45:a2:2c:1d:71:cb:
f5:6c:a2:9d:d2:77:63:be:e2:62:a4:36:f6:ee:fc:3e:e2:a1:
fd:58:f7:f2:cb:d5:70:67:26:e4:23:5f:91:57:c6:e7:b3:ed:
f3:0d:83:68:a1:95:86:cc:66:92:6b:cb:a0:5a:45:a2:01:d8:
09:75:23:85:ea:8d:93:b9:ee:dd:3e:a2:2d:8f:8f:f6:af:59:
c3:fc:3b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:15 2025 by rpki-client